Deriving a Closed-Form Expression for Worm-Scanning Strategies
International Journal of Security and Networks
Place of Publication
This work presents a closed-form expression for characterising the spread of a class of worm-scanning strategies through a mean-field approximation. This expression can both accurately capture the worm propagation speed before the number of infections becomes large and explicitly demonstrate the effects of important parameters such as the vulnerable-host distribution and the worm-scanning strategy. Experimental results verify that the closed-form expression can accurately reflect the mean value of infections over time before the infected hosts become saturated for a wide range of scanning methods including static worm-scanning strategies and self-learning worms.
Z. Chen, Chao Chen, and Y. Li (2009).
Deriving a Closed-Form Expression for Worm-Scanning Strategies. International Journal of Security and Networks.4 (3), 135-144. United Kingdom: Inderscience Publishers.